www.nordakademie.de

- NORDAKADEMIE gAG -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:9c:88:82:38:85:d4:79:48:41:ad:12 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NORDAKADEMIE gAG

Organization: NORDAKADEMIE gAG
State / Province: Schleswig-Holstein
Locality: Elmshorn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:9c:88:82:38:85:d4:79:48:41:ad:12
Serial Number (int): 9783272376312874191108025618
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: a3:e5:4c:1d:d3:71:fa:d5:b9:f3:06:d1:ab:dc:b2:33:6f:6a:ab:11
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 87:db:99:38:41:e9:d0:66:92:01:02:7b:36:a2:d2:62:6e:10:e2:c0
Fingerprint (sha256): 3e:73:b9:35:74:42:29:70:e0:ca:f6:01:9d:99:89:6d:e7:c6:b5:26:ad:31:1d:ba:c5:67:a9:e7:0f:31:16:22

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.nordakademie.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nordakademie.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nordakademie.de
www.nordakademie-gs.de
nordakademie.de
nordakademie-gs.de
lx46.nordakademie.de

Other certificates including the domain name nordakademie.de

(limited to 100 certificates)
gitlab.nordakademie.de
it.nordakademie.de
awt10.nordakademie.de
*.nordakademie.de
gitlab.nordakademie.de
owa.nordakademie.de
merkur.nordakademie.de
ac.nordakademie.de
lx29.nordakademie.de
redmine.nordakademie.de
auswahltest.nordakademie.de
vpn.dmz.nordakademie.de
www.nordakademie-gs.de
nordakademie.de
trinity.nordakademie.de
lx02.nordakademie.de
marketing.nordakademie.de
lx09.nordakademie.de
merkur.nordakademie.de
nordakademie.de
cis.nordakademie.de
vpn.nordakademie.intern
www.nordakademie.de
*.nordakademie.de
ws17.nordakademie.de
lx29.nordakademie.de
lx07.nordakademie.de
lx19.nordakademie.de
bara.nordakademie.de
gitlab2.nordakademie.de
autodiscover.nordakademie.de
lx07.nordakademie.de
redmine.nordakademie.de
owa.nordakademie.de
api.nordakademie.de
merkur.nordakademie.de
gauguin.nordakademie.de
gauguin.nordakademie.de
auswahltest.nordakademie.de
merkur.nordakademie.de
*.nordakademie.de
bara.nordakademie.de
renoir.nordakademie.de
ws27.nordakademie.de
nordakademie.de
it.nordakademie.de
fbwiki.nordakademie.de
lx28.nordakademie.de
cis.nordakademie.de
nordakademie.de
zensus.nordakademie.de
cis.nordakademie.de
vpn.dmz.nordakademie.de
lx23.nordakademie.de
support.nordakademie.de
ws01.nordakademie.de
vdi.nordakademie.de
cis.nordakademie.de
redmine.nordakademie.de
it.nordakademie.de
vdi.nordakademie.de
merkur.nordakademie.de
redmine.nordakademie.de
online.nordakademie.de
lx28.nordakademie.de
owa.nordakademie.de
owa.nordakademie.de
auswahltest.nordakademie.de
www.nordakademie.de
ws28.nordakademie.de
vdi.nordakademie.de
download.nordakademie.de
moodle.nordakademie.de
shop.nordakademie.de
fbwiki.nordakademie.de
lx09.nordakademie.de
crm.nordakademie.de
piwik.nordakademie.de
merkur.nordakademie.de
gitlab.nordakademie.de
shop.nordakademie.de
lx29.nordakademie.de
moodle2.nordakademie.de
www.nordakademie.de
shop.nordakademie.de
brauer.nordakademie.de
nordakademie.de
cis.nordakademie.de
www.nordakademie.de
moodle.nordakademie.de
vpn.dmz.nordakademie.de
nordakademie.de
owa.nordakademie.de
lx26.nordakademie.de
it.nordakademie.de
cis.nordakademie.de
lx18.nordakademie.de
vpn.dmz.nordakademie.de
vdi.nordakademie.de
awt10.nordakademie.de

Certificate

The complete raw certificate details for www.nordakademie.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKEzCCCPugAwIBAgIMH5yIgjiF1HlIQa0SMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE4
MDgyMjA3MDQyMVoXDTIwMTEyMzA3MDQyMVowdjELMAkGA1UEBhMCREUxGzAZBgNV
BAgMElNjaGxlc3dpZy1Ib2xzdGVpbjERMA8GA1UEBwwIRWxtc2hvcm4xGTAXBgNV
BAoMEE5PUkRBS0FERU1JRSBnQUcxHDAaBgNVBAMME3d3dy5ub3JkYWthZGVtaWUu
ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDae0L1W77+SQynVfS6
ZjobOYeEFlL0FCD7efnmNe6/cZuWZOUGoqQpdPOHwvZJwnH+yf5caHWzS7orjWFl
iOyj0WvD5io0l2n4yH8wuqOSf5B6XPrZdJz/I/0uuyAX3cNRVf24g2KAT6xXtTHK
AL4+JdYqTEw1hFPKP5FwcIId/I5vKEOGvPvWz9rbWurFCwFmxHDYNxWfpy18c8Na
WQLrxfuFiRO8c4usb0Of/HYcJc45EWPwFKsjJDnAa52utzb/20M6cAl+3DRr0tUW
8jDm3Da0UFCy5vj8AQcf/hCFL08BtNuwkYJirOfC+k7xknGxEj/4ErBAjB8HBj2G
mAOPAgMBAAGjggaHMIIGgzBZBgNVHSAEUjBQMAgGBmeBDAECAjANBgsrBgEEAYGt
IYIsHjAPBg0rBgEEAYGtIYIsAQEEMBEGDysGAQQBga0hgiwBAQQDCDARBg8rBgEE
AYGtIYIsAgEEAwgwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAww
CgYIKwYBBQUHAwEwHQYDVR0OBBYEFKPlTB3TcfrVufMG0avcsjNvaqsRMB8GA1Ud
IwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0MHEGA1UdEQRqMGiCE3d3dy5ub3Jk
YWthZGVtaWUuZGWCFnd3dy5ub3JkYWthZGVtaWUtZ3MuZGWCD25vcmRha2FkZW1p
ZS5kZYISbm9yZGFrYWRlbWllLWdzLmRlghRseDQ2Lm5vcmRha2FkZW1pZS5kZTCB
jQYDVR0fBIGFMIGCMD+gPaA7hjlodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rmbi1j
YS1nbG9iYWwtZzIvcHViL2NybC9jYWNybC5jcmwwP6A9oDuGOWh0dHA6Ly9jZHAy
LnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDCB
2wYIKwYBBQUHAQEEgc4wgcswMwYIKwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnBjYS5k
Zm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBJBggrBgEFBQcwAoY9aHR0cDovL2NkcDEu
cGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jYWNlcnQvY2FjZXJ0LmNy
dDBJBggrBgEFBQcwAoY9aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xv
YmFsLWcyL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDCCA9MGCisGAQQB1nkCBAIEggPD
BIIDvwO9AHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFlYHMH
UwAABAMARjBEAiAKE3cA0mRflu6RIlak015TD1YOgDCCyta0FUwwuI7cGAIgRrnX
07ly6pKYakC3HFQA2P/54Ko4/joR47zhxk6DS7oAdgDuS723dc5guuFCaR+r4Z5m
ow9+X7By2IMAxHuJeqj9ywAAAWVgcwfTAAAEAwBHMEUCIQDBqpc9Y9c2zRJxs6cX
z0+evkCNxfihp/aBHj5NwhRaYgIgIG9ZLLQsQEP+4FY172oLxBQLlgqKqzvAbr11
wZiCwG0AdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWVgcwhW
AAAEAwBGMEQCIDosekfQEltArIyUuKwWk2kn2XI/3d7BizpSXTJrLIycAiB0NcKi
5sbuzYUFomv3b5q2pY6Q2qY9wU4/5+iuSBQ9xQB2AKrnC388uNVmyGwvFpecn0Rf
aasOtFNVibL3egMBBPPNAAABZWBzBwIAAAQDAEcwRQIhAIkqvQEd7PpDDngaNd4Z
xrhvcMekHQF/RDdAhLmxeeUSAiBEeRAowgVqqVrU4r5kSvLZAr+D3A+oZ3kUUpN4
iaQa3QB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABZWBzCk8A
AAQDAEcwRQIgBx0yboKHIVhQxVktZUxv4Ithku/cPJSrCgz98OpwjT0CIQDwha2b
3y5brnZhiXESEPNR1qAR04DZeque/S4LJ9TvVgB1ALvZ37wfinG1k5Qjl6qSe0c4
V5UKq1LoGpCWZDaOHtGFAAABZWBzChsAAAQDAEYwRAIgXoPlHQCoEN3hAoIIcnwO
+e7uqIBkkn3ICav/ocqSZFkCIAP/gBJOOtMxBKuvjHiF/2RPd7hzAgNIzPceM2js
pBi7AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFlYHMIwgAA
BAMARzBFAiB1ZtFEYEO2YVT1mXWgTquavzqZVyumLJ3N9iGRDbltXQIhAJ2B/09k
2d53l5Z1JD6Uqx6UU4IKHGK8nQs05IfVh+sfAHYApLkJkLQYWBSHuxOizGdwCjw1
mAT5G9+443fNDsgN3BAAAAFlYHMK9wAABAMARzBFAiBvLfAG/+UZSgzo+kdsWUbN
QxguJD5T9xBJ6n5xPbzeFQIhAOkHjl/So/mUGGAhA+YxW9wVmjRFTqxaYPgRNZeV
w++9MA0GCSqGSIb3DQEBCwUAA4IBAQBiEdpTIjttBas5HX6pf1RrVzqGThIzGlxY
cMgl/YLooM6HaQPIfof1YlrKx6EyHI8gVbEodyM/kE3YWrYhrGnjYx1/EBX4IsW+
WNNrhQqm+WxidN4EAz6+bunXrL6Gc0ksqVAYbNhenKvFfsq57r3VE3PRXwnRcZGA
Io++j0AYvh0ABXh/f4mWDQ0JZNJY8qqnTBzotKA3sjlqdsI34Nwr9fXURNq+oCnZ
luhfP920TXEduPWQh0LC3hwU/iVYs0iQM4T+Qbt7/XylmGKo35oG5DmTMEgjEGu7
SjOuoWLVZ6o8uYfQOl0JqXNncRg2pkr6JOL1TCa33FvtZM1SvdZr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ntC9Vu+/kkMp1X0umY6
GzmHhBZS9BQg+3n55jXuv3GblmTlBqKkKXTzh8L2ScJx/sn+XGh1s0u6K41hZYjs
o9Frw+YqNJdp+Mh/MLqjkn+Qelz62XSc/yP9LrsgF93DUVX9uINigE+sV7UxygC+
PiXWKkxMNYRTyj+RcHCCHfyObyhDhrz71s/a21rqxQsBZsRw2DcVn6ctfHPDWlkC
68X7hYkTvHOLrG9Dn/x2HCXOORFj8BSrIyQ5wGudrrc2/9tDOnAJftw0a9LVFvIw
5tw2tFBQsub4/AEHH/4QhS9PAbTbsJGCYqznwvpO8ZJxsRI/+BKwQIwfBwY9hpgD
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9783272376312874191108025618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 07:04:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-23 07:04:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Elmshorn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NORDAKADEMIE gAG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nordakademie.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27580733021443966528657112296236205720246958196615993970821388470880292198145292261794001624999900075286369073759479892712694120934253319385536674988236317656235650178157910558026574137390461350300783931831523896605361432517290583310985936813713733875052939640837949293109038371088952102372330803357395872919537531715229634777754495370799182002801205506298852663974628389275137426289888178613889746013636894754323302343533441324466972274332940350895991672441494688513916288215158816871606241953321097636051392524195189284595573468220279819679000213475568704760784433895929872829592186451459597545244820115775404114831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3e54c1dd371fad5b9f306d1abdcb2336f6aab11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordakademie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordakademie-gs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordakademie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordakademie-gs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lx46.nordakademie.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (963 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (959 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006211da53223b6d05ab391d7ea97f546b573a864e12331a5c5870c825fd82e8a0ce876903c87e87f5625acac7a1321c8f2055b12877233f904dd85ab621ac69e3631d7f1015f822c5be58d36b850aa6f96c6274de04033ebe6ee9d7acbe8673492ca950186cd85e9cabc57ecab9eebdd51373d15f09d1719180228fbe8f4018be1d0005787f7f89960d0d0964d258f2aaa74c1ce8b4a037b2396a76c237e0dc2bf5f5d444dabea029d996e85f3fddb44d711db8f5908742c2de1c14fe2558b348903384fe41bb7bfd7ca59862a8df9a06e43993304823106bbb4a33aea162d567aa3cb987d03a5d09a97367711836a64afa24e2f54c26b7dc5bed64cd52bdd66b